Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zs7vorWpD0zrDrDW8Z27HUDxAUA.roa
File: zs7vorWpD0zrDrDW8Z27HUDxAUA.roa (raw, json)
Hash identifier: gi/VZ0jVQMuSAXH0+5UuufeqKayl1EFis/n73Iu1p6g=
Subject key identifier: CE:CE:EF:A2:B5:A9:0F:4C:EB:0E:B0:D6:F1:9D:BB:1D:40:F1:01:40
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D06B8F5AFB58B4E3F4D236BA0D883D2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zs7vorWpD0zrDrDW8Z27HUDxAUA.roa
Signing time: Mon 02 Nov 2026 16:10:25 +0000
ROA not before: Mon 02 Nov 2026 16:10:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218621
IP address blocks: 177.202.118.0/24 maxlen: 24
179.236.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:06:b8:f5:af:b5:8b:4e:3f:4d:23:6b:a0:d8:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 16:10:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceceefa2b5a90f4ceb0eb0d6f19dbb1d40f10140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:84:fb:9f:86:f0:2b:26:3c:15:e9:53:04:
03:cb:27:14:81:86:7c:5a:c4:3d:fd:57:3b:c9:02:
94:50:ec:72:e2:09:68:b9:a5:42:17:2e:8f:61:38:
db:a1:65:a3:23:71:53:31:4f:af:a5:af:75:95:68:
87:a6:74:5b:e7:e0:41:b7:47:29:e2:c9:5d:e5:7b:
33:f5:2b:e6:e5:42:09:a5:4b:4e:fa:43:e8:68:fa:
76:cf:c5:5f:b1:41:29:ce:c5:eb:20:76:12:9a:18:
f1:ed:7e:c5:56:ff:8e:56:24:b3:d0:ab:fa:10:8b:
96:64:8d:f0:3b:72:39:f4:18:e5:b5:e9:a1:ae:97:
61:2c:6f:cc:1c:41:e8:39:18:84:62:41:37:bf:87:
16:fc:e4:2b:96:c2:a3:06:ca:ea:58:39:5c:4e:a9:
f1:0b:e5:c1:ed:bb:f6:11:c8:cd:10:56:da:1a:1b:
1a:2f:65:cd:a4:a6:75:97:15:4b:cf:67:a2:7e:46:
d8:f1:54:24:42:53:9a:a5:18:80:f1:81:ce:45:33:
d8:be:46:2d:63:97:31:67:f0:4f:c8:c1:37:b6:c7:
1f:a6:b3:73:4c:ab:06:8e:10:70:e0:71:89:4e:66:
e9:ab:9e:69:77:8a:17:3e:09:25:93:1f:d9:74:e4:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:EF:A2:B5:A9:0F:4C:EB:0E:B0:D6:F1:9D:BB:1D:40:F1:01:40
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zs7vorWpD0zrDrDW8Z27HUDxAUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.202.118.0/24
179.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a3:6d:e6:81:2f:68:5c:de:12:bb:60:0c:26:43:f2:e6:4e:
79:a8:6b:a8:e2:e1:23:29:e4:7c:60:e7:ba:de:21:8e:27:9a:
4a:ba:04:e6:83:78:43:eb:66:4d:30:aa:5a:b3:8c:a4:f0:78:
3c:ee:16:5a:9b:f7:ca:74:5c:f4:76:37:ab:55:46:73:83:e1:
4b:81:24:8b:d2:c8:17:98:78:c0:28:ec:06:13:5c:25:60:9f:
e9:f1:60:c7:de:5c:31:9a:6f:ce:7c:07:ed:89:bf:f3:2d:93:
d9:23:dd:3c:13:d3:c6:00:6d:48:ca:cb:ba:0d:7a:61:71:f6:
5d:97:dd:89:89:5f:b2:55:58:4a:de:a4:9b:52:24:ea:26:be:
d7:1c:f4:7b:69:94:d0:cb:d7:fc:53:e2:57:fe:57:62:6e:cf:
bd:9c:b3:10:72:5a:1c:ad:fc:05:57:81:20:ab:fc:c9:61:46:
4b:39:21:26:8a:84:a8:1c:be:c3:cd:77:8f:17:18:8e:25:e7:
6e:51:1d:66:4d:8d:1e:0c:c5:12:ad:c5:85:d9:41:d6:1e:df:
c2:8c:25:4b:2b:de:99:78:74:f4:1e:9a:a6:23:5c:ee:7f:71:
3f:10:f9:fd:c2:b3:32:6b:8c:f2:b2:77:9a:64:9b:78:78:e4:
e8:ae:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:42 2026 by rpki-client